IR-9(2)

Requirement

Provide information spillage response training [Assignment: organization-defined frequency].

Discussion

Organizations establish requirements for responding to information spillage incidents in incident response plans. Incident response training on a regular basis helps to ensure that organizational personnel understand their individual responsibilities and what specific actions to take when spillage incidents occur.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Incident response policy; procedures addressing information spillage response training; information spillage response training curriculum; information spillage response training materials; incident response plan; system security plan; information spillage response training records; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with incident response training responsibilities; organizational personnel with information security responsibilities].

ID	Assessment Objectives
IR-09(02)	information spillage response training is provided <IR-09(02)_ODP frequency>.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!